Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea10dac5-32ce-4aaf-8297-ffd1dbc8521a.roa
File: ea10dac5-32ce-4aaf-8297-ffd1dbc8521a.roa (raw, json)
Hash identifier: bTU0Q7TclIrnHvCqNLvJfH05Ia0P4GJ3PZ2tHpDbvS4=
Subject key identifier: C0:D6:89:26:08:18:D5:BD:1C:8B:CB:60:63:C9:CF:51:98:1D:FB:38
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 18D962CE76405878A3E9768BCB1388AFFBE42791
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea10dac5-32ce-4aaf-8297-ffd1dbc8521a.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:5000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d9:62:ce:76:40:58:78:a3:e9:76:8b:cb:13:88:af:fb:e4:27:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=de770af5fc0f9b1acd92419642bf3565acd3a3717cd0875867c303c7795df6b0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:41:99:4d:e5:21:4a:1c:b5:e4:85:c4:1a:
b2:c4:55:06:b4:60:5f:ed:de:34:9e:a6:e2:74:7e:
67:b6:c5:9f:26:a6:b0:9e:c6:78:6d:f0:9a:89:99:
72:41:39:42:c8:c8:69:fb:50:99:1a:12:56:93:9e:
4b:c9:0b:d0:16:e4:fd:5b:78:71:f7:38:75:2f:3d:
c8:b4:96:56:4a:e0:49:39:06:6b:3f:dc:4c:89:7a:
79:13:2f:c2:2a:dc:72:e3:93:73:b0:08:51:20:e4:
d0:e4:a4:68:b4:4b:30:d3:40:ea:70:51:c2:97:b9:
32:83:bc:34:32:06:36:c0:01:16:a4:53:cd:06:0d:
67:a2:b6:27:e2:97:6f:d6:6a:f3:6f:7a:86:a7:0f:
c0:3d:ca:42:e1:e5:4b:00:e6:9c:33:cf:0f:d8:f1:
c8:04:3f:3c:41:01:02:96:fe:2b:51:32:25:41:b0:
16:09:59:15:bc:18:43:64:c4:97:16:87:44:b9:87:
0e:cd:c0:8b:ec:1d:43:5b:76:95:87:72:7e:66:f3:
a1:9d:ad:7e:1e:d2:4f:23:93:ad:0d:90:ce:7e:db:
18:21:27:94:18:00:3b:84:49:41:e7:c7:b5:9d:01:
31:2b:1d:9e:41:9a:2d:32:0f:4c:28:4b:3c:cc:3c:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D6:89:26:08:18:D5:BD:1C:8B:CB:60:63:C9:CF:51:98:1D:FB:38
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea10dac5-32ce-4aaf-8297-ffd1dbc8521a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:5000::/40
Signature Algorithm: sha256WithRSAEncryption
a8:d8:ef:5e:7c:4e:96:c5:1c:1a:68:63:f4:d4:c0:7e:65:64:
c6:ff:68:a4:27:c2:ed:d7:b6:df:c6:25:a6:a7:c0:13:bd:9c:
14:47:8e:af:e2:a4:97:de:e9:82:53:e2:5e:20:b3:1d:e8:e8:
79:22:c6:cb:cc:a2:58:2d:2c:41:52:1c:45:83:72:0e:a9:b7:
03:30:4d:78:7e:a0:03:e6:59:8b:10:3a:61:a3:e2:0b:91:41:
c4:b4:cb:d7:fb:7d:c7:1a:af:c4:c8:f3:4a:88:05:8d:d2:85:
bf:28:25:e7:b9:d3:ed:1c:80:01:a2:0a:7f:ae:c3:31:e4:cb:
75:5a:9b:99:d2:49:85:20:0e:ca:56:75:27:5c:90:25:bc:99:
18:29:07:a8:01:c6:89:42:60:96:08:d9:0f:69:89:97:c1:5f:
40:e2:55:28:6b:f2:3d:b7:54:06:47:e3:6f:61:79:26:94:6e:
f7:19:f3:6d:ea:b1:2c:86:12:17:b5:37:51:eb:3b:d6:4b:b2:
5f:c2:61:68:01:71:ad:3d:64:98:c2:67:03:fa:4c:2b:c8:f1:
2b:69:f5:cc:7b:12:85:23:2a:dc:61:b4:b5:65:55:8e:d4:bd:
77:e8:c8:d4:c4:e2:a3:64:43:13:7f:bd:01:08:ed:69:97:68:
0f:0d:28:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:08:39 2025 by rpki-client